feat: zero-config auth — interactive PAT setup, auto-rotation, all CLIs (#81, #83)#82

Merged

datasciencemonkey merged 40 commits into

mainfrom

feat/pat-auto-rotation

Mar 28, 2026

Commits on Mar 27, 2026

feat: add PATRotator for short-lived token auto-rotation (#81)
datasciencemonkey
committed
feat: wire PATRotator into app startup (#81)
datasciencemonkey
committed
chore: add secret resource with WRITE for PAT rotation (#81)
datasciencemonkey
committed
docs: PAT auto-rotation implementation plan (#81)
datasciencemonkey
committed
fix: read PAT_ROTATION_INTERVAL and PAT_TOKEN_LIFETIME from env vars (#81)
datasciencemonkey
committed
chore: set PAT rotation interval to 2 minutes for testing (#81)
datasciencemonkey
committed
fix: set default rotation to 2 min, remove config from app.yaml (#81)
datasciencemonkey
committed
fix: clearer rotation log messages — INFO: starting/complete (#81)
datasciencemonkey
committed
fix: use pat_rotator.py defaults (120s), remove env var overrides from app.py (#81)
datasciencemonkey
committed
chore: set PAT rotation to 5 min interval, 10 min lifetime (#81)
datasciencemonkey
committed
feat: resolve owner via SP + Apps API (app.creator), preserve SP credentials (#81)
datasciencemonkey
committed
feat: 10-min rotation with 15-min lifetime, ensure_fresh() on session create (#81)
datasciencemonkey
committed
feat: session-aware rotation — skip when no active sessions (#81)
datasciencemonkey
committed
feat: interactive PAT setup — /api/pat-status + /api/configure-pat endpoints (#83)
datasciencemonkey
committed
feat: terminal prompts for PAT on first session, remove DATABRICKS_TOKEN from app.yaml (#83)
datasciencemonkey
committed
refactor: remove secret scope persistence from PATRotator (#83)
datasciencemonkey
committed
chore: remove secret scope config — PAT prompt handles restarts (#83)
datasciencemonkey
committed
fix: make setup_claude.py token-optional — install CLI without PAT (#83)
datasciencemonkey
committed
feat: configure Claude CLI auth after interactive PAT setup (#83)
datasciencemonkey
committed
fix: all setup scripts install CLI without token, skip config until PAT (#83)
datasciencemonkey
committed
feat: configure all CLIs (Claude, Codex, OpenCode, Gemini, Databricks) after PAT setup (#83)
datasciencemonkey
committed
fix: add missing lock to heartbeat test fixture
datasciencemonkey
committed
docs: update README and deployment guide for zero-config auth (#83)
datasciencemonkey
committed
fix: strip SP creds after owner resolution, move setup to after PAT (#83)
datasciencemonkey
committed

Commits on Mar 28, 2026